Loading the latest scan…
npm · registry.npmjs.org
Shipped Live Secret, Credential file access
Why PkgRadar flagged 0.5.0
| Severity | Signal | Evidence |
|---|---|---|
| high | Shipped Live Secret | — |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.25.0 | Review | 10 | 2026-08-19 |
0.24.0 | Review | 10 | 2026-08-13 |
0.23.0 | Review | 10 | 2026-08-13 |
0.22.0 | Review | 10 | 2026-08-12 |
0.21.0 | Review | 10 | 2026-08-12 |
0.19.0 | Review | 10 | 2026-08-11 |
0.18.0 | Review | 7 | 2026-08-05 |
0.16.0 | Review | 10 | 2026-08-04 |
0.15.0 | Review | 10 | 2026-08-04 |
0.14.0 | Review | 10 | 2026-07-30 |
0.13.0 | Review | 10 | 2026-07-30 |
0.12.0 | Review | 10 | 2026-07-30 |
0.11.0 | Review | 10 | 2026-07-29 |
0.5.0 | High risk | 60 | 2026-07-25 |
0.3.0 | High risk | 0 | 2026-07-03 |
0.2.1 | High risk | 0 | 2026-06-26 |
0.2.3 | High risk | 0 | 2026-06-26 |
0.2.2 | High risk | 0 | 2026-06-26 |
Block this in CI
pkgradar gate --ecosystem npm @grovetech/[email protected]